Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File: 3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier: 5O41CTPE+QJcdsxIw3yaUQOqIs55x2LkGAGHY0pxXsY=
Subject key identifier: 59:7E:3D:73:08:07:E1:B0:74:53:A5:D4:64:F5:65:BA:55:B4:A0:6C
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 01993380476F5E07EE8596222099435DAFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number: 107D
Signing time: Wed 10 Sep 2025 12:01:08 +0000
Manifest this update: Wed 10 Sep 2025 12:01:08 +0000
Manifest next update: Thu 11 Sep 2025 12:01:08 +0000
Files and hashes: 1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: 42SitWE2erKNZuFgmvaAz8dwpxx7u3Vx8WkuWJjPWwY=)
2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:47:6f:5e:07:ee:85:96:22:20:99:43:5d:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Sep 10 12:01:08 2025 GMT
Not After : Sep 11 12:01:08 2025 GMT
Subject: CN=597e3d730807e1b07453a5d464f565ba55b4a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ad:56:a9:2e:65:d0:a4:8d:49:b1:99:44:21:
42:1d:f1:27:0f:fd:f7:cb:e4:a2:e7:14:fa:d2:88:
23:37:07:d0:5a:41:c2:fb:97:44:11:ed:1c:3a:4e:
8d:2e:a8:62:69:79:c0:72:44:eb:8c:2e:a4:fa:fe:
27:06:ee:ed:85:52:95:54:70:1a:95:9d:9c:26:fd:
c1:80:41:fc:8d:0c:6d:9d:12:84:48:8d:6a:12:bc:
62:67:db:5f:ff:4e:ce:1a:10:df:13:4c:a8:43:4d:
1f:1d:d5:72:92:d0:d3:ef:7c:9d:18:fd:1a:ce:c9:
7d:13:07:1d:ae:5a:76:0a:44:31:7b:92:56:19:25:
98:cb:e5:89:f3:35:54:62:79:ca:f2:25:5b:30:3e:
f0:fb:21:42:cd:c1:85:e5:a3:85:69:dc:a0:70:91:
80:a4:0e:bc:dd:d6:6c:fa:4f:7b:7d:c7:9f:f5:d7:
03:3f:3f:b0:f3:75:92:6d:8e:ac:7e:25:77:ce:51:
eb:4e:fe:a2:14:25:59:7b:cd:85:06:22:41:98:97:
f6:72:e2:40:0c:d1:5a:f1:65:ec:84:cc:ec:dc:2c:
42:ea:c2:f1:a7:bf:8a:f6:fc:27:2c:64:a4:4c:e1:
63:6e:f1:ec:91:03:b5:d8:6e:0e:0e:86:14:e3:e0:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7E:3D:73:08:07:E1:B0:74:53:A5:D4:64:F5:65:BA:55:B4:A0:6C
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:3c:0c:c5:9b:69:91:4d:8f:df:0b:6c:90:0a:a5:52:ca:
d4:b0:93:40:f4:70:20:af:ac:81:e7:be:53:48:65:b2:06:06:
f6:78:6e:d2:32:ec:0b:af:5b:1a:d1:dd:1a:62:12:b5:77:97:
5a:97:2c:f6:a3:18:bf:c1:35:1a:7b:96:eb:d3:29:fa:50:f6:
2e:5e:e6:4f:97:43:c5:f9:2c:30:b0:ff:de:62:85:d2:08:1a:
56:ff:8f:35:1a:04:c5:b4:75:d0:1b:35:86:8f:0a:5a:c2:f2:
d0:9f:86:94:41:0a:00:a3:0a:f8:aa:fe:be:7a:96:58:3a:ff:
93:86:58:16:af:d6:0b:f0:df:04:69:36:6d:e8:c0:80:c4:a6:
0a:3a:de:f1:e7:d8:71:8f:7a:5a:26:db:5e:dc:8e:38:d1:34:
32:51:ef:ae:83:3a:8e:bf:8c:02:50:a7:6e:4a:41:c1:fb:81:
c2:6b:26:6e:ca:0e:12:b2:9f:b8:f2:95:2c:e5:b3:e9:08:35:
81:03:41:11:27:a1:fb:3e:2b:6d:68:aa:6c:53:63:de:ec:ed:
33:57:f3:67:77:d4:e6:3a:73:39:52:89:47:76:71:e2:3e:8a:
49:fd:c2:52:7e:1c:03:48:46:be:70:0d:0c:bf:ad:4f:56:1c:
e6:c7:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:20:42 2025 by rpki-client